Hi, I wanted to share that the so called integrity check is considering only the core WP disto, english based. It's not autodetecting the language, thus comparing against the spanish version. I don't know if there are other official versions of WP for other languages, but I think a security suite like this should be able to detect the right one.
Another issue: the admin user check is supposed to detect if there are plain "admin" named users? Because I use to deploy administrators like "admin-Johny" and it's filtering the "-" char, so the real username is obscured and confusing. This should be fixed. Try the checker with these usernames: harry-admin, admin-harry, admin-Harry, Harry-Admin.
Best regards. Thank you.